Item 2 in waterfall is HTTP/2 Stream: 7 (as you can see response comes last)
Item 3 in waterfall is HTTP/2 Stream: 3
Item 4 in waterfall is HTTP/2 Stream: 1 (as you can see it is the only one with DNS+TCP+TLS before)
Item 5 in waterfall is HTTP/2 Stream: 5

They all have the same request start time (coming from <link rel=preload>) and this is probably why -- AFAIU requests are sorted by start time, but if multiple start at the same time, they get wrongly shuffled.